On 11/25/2017 11:00 AM, Brian J. Murrell wrote:
> On Sat, 2017-11-25 at 10:54 -0800, Tom Eastep wrote:
>>
>> That is correct. I do a similar thing here; by using source-address
>> routing rules, my DMZ uses one interface and the local LAN uses the
>> other.
> 
> Not sure I'm following but you are making me curious.
> 
> Only if you care to, could you expand on that a bit?
> 

My config is at http://www.shorewall.org/SharedConfig.html

I use the same files for IPv4 and IPv6 with the exception of
shorewall.conf and shorewall6.conf.

If you look at my rtrules file, I think you will see what I am doing.

-Tom
-- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to